@bike4mind/cli 0.2.31-b4m-cli-undo-command.19493 → 0.2.31-b4m-cli-undo-command.19535

package/dist/index.js

@@ -1,22 +1,26 @@
 #!/usr/bin/env node
+import "./chunk-GQGOWACU.js";
+import "./chunk-F4PXVLZX.js";
+import "./chunk-ERV5G6MX.js";
 import "./chunk-BPFEGDC7.js";
 import "./chunk-BDQBOLYG.js";
 import {
   getEffectiveApiKey,
   getOpenWeatherKey,
   getSerperKey
-} from "./chunk-T67NGQW6.js";
-import "./chunk-GQGOWACU.js";
+} from "./chunk-JWJF6O4L.js";
 import {
   ConfigStore,
   logger
-} from "./chunk-LBTTUQJM.js";
+} from "./chunk-32PKF3N7.js";
+import {
+  checkForUpdate,
+  package_default
+} from "./chunk-M2QCFHVX.js";
 import {
   selectActiveBackgroundAgents,
   useCliStore
 } from "./chunk-BYXFQJYT.js";
-import "./chunk-2LLA4MTN.js";
-import "./chunk-ZOWCX4MQ.js";
 import {
   BFLImageService,
   BaseStorage,
@@ -28,7 +32,7 @@ import {
   OpenAIBackend,
   OpenAIImageService,
   XAIImageService
-} from "./chunk-RI45VJW3.js";
+} from "./chunk-3SPW5FYJ.js";
 import {
   AiEvents,
   ApiKeyEvents,
@@ -86,10 +90,10 @@ import {
   getMcpProviderMetadata,
   getViewById,
   resolveNavigationIntents
-} from "./chunk-GE7Q64MS.js";
+} from "./chunk-NI22LIK3.js";
 import {
   Logger
-} from "./chunk-OCYRD7D6.js";
+} from "./chunk-PFBYGCOW.js";
 
 // src/index.tsx
 import React21, { useState as useState10, useEffect as useEffect7, useCallback as useCallback2, useRef as useRef3 } from "react";
@@ -2908,13 +2912,16 @@ var CheckpointStore = class {
     try {
       let hasChanges = false;
       for (const filePath of filePaths) {
-        const absolutePath = path6.resolve(this.projectDir, filePath);
+        const absolutePath = this.validatePathWithinProject(filePath);
         const shadowPath = path6.join(this.shadowRepoDir, filePath);
         const shadowDir = path6.dirname(shadowPath);
         const absentMarkerPath = path6.join(shadowDir, `${path6.basename(filePath)}${ABSENT_MARKER}`);
         await fs5.mkdir(shadowDir, { recursive: true });
         if (existsSync4(absolutePath)) {
-          const stats = await fs5.stat(absolutePath);
+          const stats = await fs5.lstat(absolutePath);
+          if (stats.isSymbolicLink()) {
+            continue;
+          }
           if (stats.size > MAX_FILE_SIZE2) {
             continue;
           }
@@ -2991,7 +2998,7 @@ var CheckpointStore = class {
       throw new Error(`Checkpoint #${index} not found. Use /checkpoints to see available restore points.`);
     }
     for (const filePath of checkpoint.filePaths) {
-      const absolutePath = path6.resolve(this.projectDir, filePath);
+      const absolutePath = this.validatePathWithinProject(filePath);
       try {
         const content = this.git("show", `${checkpoint.id}:${filePath}`);
         await fs5.mkdir(path6.dirname(absolutePath), { recursive: true });
@@ -3027,7 +3034,9 @@ var CheckpointStore = class {
     }
     const diffParts = [];
     for (const filePath of checkpoint.filePaths) {
-      const absolutePath = path6.resolve(this.projectDir, filePath);
+      const absolutePath = this.validatePathWithinProject(filePath);
+      const tmpCheckpoint = path6.join(this.shadowRepoDir, ".diff-a");
+      const tmpCurrent = path6.join(this.shadowRepoDir, ".diff-b");
       try {
         let checkpointContent;
         try {
@@ -3042,8 +3051,6 @@ var CheckpointStore = class {
         if (checkpointContent === currentContent) {
           continue;
         }
-        const tmpCheckpoint = path6.join(this.shadowRepoDir, ".diff-a");
-        const tmpCurrent = path6.join(this.shadowRepoDir, ".diff-b");
         writeFileSync(tmpCheckpoint, checkpointContent, "utf-8");
         writeFileSync(tmpCurrent, currentContent, "utf-8");
         try {
@@ -3066,12 +3073,16 @@ ${output}`);
             }
           }
         }
+      } catch {
+      } finally {
         try {
           unlinkSync(tmpCheckpoint);
+        } catch {
+        }
+        try {
           unlinkSync(tmpCurrent);
         } catch {
         }
-      } catch {
       }
     }
     return diffParts.join("\n");
@@ -3105,6 +3116,18 @@ ${output}`);
     }
   }
   // --- Private helpers ---
+  /**
+   * Validate that a file path resolves within the project directory.
+   * Prevents path traversal attacks (e.g., ../../etc/passwd).
+   */
+  validatePathWithinProject(filePath) {
+    const absolutePath = path6.resolve(this.projectDir, filePath);
+    const normalizedProject = path6.resolve(this.projectDir) + path6.sep;
+    if (!absolutePath.startsWith(normalizedProject) && absolutePath !== path6.resolve(this.projectDir)) {
+      throw new Error(`Path traversal detected: ${filePath}`);
+    }
+    return absolutePath;
+  }
   /**
    * Execute a git command in the shadow repo
    */
@@ -3220,7 +3243,7 @@ var AgentConfigSchema = z.union([
     type: z.string(),
     // Agent type name
     thoroughness: z.enum(["quick", "medium", "very_thorough"]).optional(),
-    config: z.record(z.unknown()).optional()
+    config: z.record(z.string(), z.unknown()).optional()
     // Additional agent-specific config
   })
 ]);
@@ -3228,6 +3251,7 @@ var VALID_MODELS = ["opus", "sonnet", "haiku"];
 var FrontmatterSchema = z.object({
   // Display name for the skill (defaults to filename if not specified)
   name: z.string().optional(),
+  // Command description
   description: flexibleString,
   "argument-hint": flexibleString,
   // Model override - validated against allowed values (opus, sonnet, haiku)
@@ -3235,16 +3259,16 @@ var FrontmatterSchema = z.object({
   // Agent integration fields
   agent: AgentConfigSchema.optional(),
   thoroughness: z.enum(["quick", "medium", "very_thorough"]).optional(),
-  variables: z.record(z.string()).optional(),
+  variables: z.record(z.string(), z.string()).optional(),
   // Tool filtering - restrict which tools are available during skill execution
   "allowed-tools": flexibleStringArray,
   // Execution context: 'inline' (default) runs in main context, 'fork' runs in subagent
-  context: z.enum(["fork", "inline"]).default("inline"),
+  context: z.enum(["fork", "inline"]).prefault("inline"),
   // Visibility controls
   /** When true, skill is hidden from AI's auto-loading in system prompt */
-  "disable-model-invocation": z.boolean().default(false),
+  "disable-model-invocation": z.boolean().prefault(false),
   /** When false, skill is hidden from /commands menu but still callable */
-  "user-invocable": z.boolean().default(true),
+  "user-invocable": z.boolean().prefault(true),
   // Lifecycle hooks
   hooks: HooksSchema
 });
@@ -4341,7 +4365,7 @@ var loginUserSchema = z5.object({
     colorDepth: z5.number(),
     pixelDepth: z5.number(),
     devicePixelRatio: z5.number(),
-    ip: z5.string().optional().default(""),
+    ip: z5.string().optional().prefault(""),
     location: z5.string().optional()
   }).optional()
 });
@@ -4354,7 +4378,7 @@ import escapeRegExp from "lodash/escapeRegExp.js";
 import { randomUUID } from "crypto";
 import { z as z6 } from "zod";
 var forgotPasswordUserSchema = z6.object({
-  email: z6.string().email()
+  email: z6.email()
 });
 
 // ../../b4m-core/packages/services/dist/src/userService/update.js
@@ -4402,7 +4426,7 @@ var sendFriendRequestSchema = z8.object({
 var adminUpdateUserSchema = updateUserSchema.extend({
   id: z9.string(),
   // Admins can directly update email addresses without verification
-  email: z9.string().email().optional(),
+  email: z9.email().optional(),
   role: z9.string().optional().nullable(),
   isAdmin: z9.boolean().optional(),
   organizationId: z9.string().optional().nullable(),
@@ -4449,7 +4473,7 @@ var registerUserSchema = z11.object({
     colorDepth: z11.number(),
     pixelDepth: z11.number(),
     devicePixelRatio: z11.number(),
-    ip: z11.string().optional().default(""),
+    ip: z11.string().optional().prefault(""),
     location: z11.string().optional()
   }).optional()
 });
@@ -4464,10 +4488,10 @@ var adminDeleteUserSchema = z12.object({
 import { z as z13 } from "zod";
 var searchUserCollectionSchema = z13.object({
   userId: z13.string(),
-  page: z13.coerce.number().optional().default(1),
-  limit: z13.coerce.number().optional().default(10),
-  search: z13.string().optional().default(""),
-  type: z13.nativeEnum(CollectionType).optional()
+  page: z13.coerce.number().optional().prefault(1),
+  limit: z13.coerce.number().optional().prefault(10),
+  search: z13.string().optional().prefault(""),
+  type: z13.enum(CollectionType).optional()
 });
 
 // ../../b4m-core/packages/services/dist/src/userService/recalculateUserStorage.js
@@ -4482,7 +4506,7 @@ var recalculateUserStorageSchema = z14.object({
 // ../../b4m-core/packages/services/dist/src/userService/listRecentActivities.js
 import { z as z15 } from "zod";
 var listRecentActivitiesSchema = z15.object({
-  coverage: z15.enum(["all", "important"]).default("important"),
+  coverage: z15.enum(["all", "important"]).prefault("important"),
   userId: z15.string().optional()
 });
 var IMPORTANT_COUNTER_NAMES = [
@@ -4525,7 +4549,7 @@ import { randomUUID as randomUUID4 } from "crypto";
 import { z as z19 } from "zod";
 var requestEmailChangeSchema = z19.object({
   userId: z19.string(),
-  newEmail: z19.string().email(),
+  newEmail: z19.email(),
   password: z19.string()
 });
 
@@ -4547,11 +4571,11 @@ import bcrypt5 from "bcryptjs";
 import { z as z22 } from "zod";
 var createUserApiKeySchema = z22.object({
   name: z22.string().min(1).max(100),
-  scopes: z22.array(z22.nativeEnum(ApiKeyScope)).min(1),
+  scopes: z22.array(z22.enum(ApiKeyScope)).min(1),
   expiresAt: z22.date().optional(),
   rateLimit: z22.object({
-    requestsPerMinute: z22.number().min(1).max(1e3).default(60),
-    requestsPerDay: z22.number().min(1).max(1e4).default(1e3)
+    requestsPerMinute: z22.number().min(1).max(1e3).prefault(60),
+    requestsPerDay: z22.number().min(1).max(1e4).prefault(1e3)
   }).optional(),
   metadata: z22.object({
     clientIP: z22.string().optional(),
@@ -4740,8 +4764,8 @@ var generateDailyReportSchema = z26.object({
 import { z as z27 } from "zod";
 var incrementUserCounterSchema = z27.object({
   action: z27.string(),
-  increment: z27.coerce.number().default(1).optional(),
-  metadata: z27.record(z27.unknown()).optional()
+  increment: z27.coerce.number().prefault(1).optional(),
+  metadata: z27.record(z27.string(), z27.unknown()).optional()
 });
 
 // ../../b4m-core/packages/services/dist/src/countersService/sendSlackReport.js
@@ -4765,57 +4789,57 @@ import axios3 from "axios";
 import { z as z28 } from "zod";
 import last from "lodash/last.js";
 var epochDate = () => z28.preprocess((val) => new Date(Number(val) * 1e3), z28.date());
-var openaiConversationSchema = z28.object({
+var openaiConversationSchema = z28.looseObject({
   id: z28.string(),
   title: z28.string(),
   create_time: epochDate(),
   update_time: epochDate().nullable(),
   mapping: z28.record(
     z28.string(),
-    z28.object({
+    z28.looseObject({
       id: z28.string(),
       parent: z28.string().nullable(),
       children: z28.array(z28.string()),
-      message: z28.object({
+      message: z28.looseObject({
         id: z28.string(),
         create_time: epochDate(),
         update_time: epochDate().nullable(),
-        author: z28.object({
+        author: z28.looseObject({
           role: z28.string(),
           name: z28.string().nullable(),
           metadata: z28.any()
           // Accept any metadata structure
-        }).passthrough(),
+        }),
         // Allow extra fields in author
-        content: z28.object({
+        content: z28.looseObject({
           content_type: z28.string(),
           parts: z28.array(z28.any()).optional()
           // Accept any type in parts array (strings, objects, etc.)
-        }).passthrough(),
+        }),
         // Allow extra fields in content
         status: z28.string(),
         end_turn: z28.boolean().nullable(),
         metadata: z28.any(),
         // Accept any metadata structure since it varies widely
         recipient: z28.string()
-      }).passthrough().nullable()
-    }).passthrough()
+      }).nullable()
+    })
     // Allow extra fields in mapping node
   )
-}).passthrough();
+});
 
 // ../../b4m-core/packages/services/dist/src/importHistoryService/importClaudeHistory.js
 import { z as z29 } from "zod";
-var claudeChatMessageSchema = z29.object({
-  uuid: z29.string().uuid(),
+var claudeChatMessageSchema = z29.looseObject({
+  uuid: z29.uuid(),
   text: z29.string(),
   content: z29.array(
-    z29.object({
+    z29.looseObject({
       type: z29.string(),
       // Accept any type: "text", "image", "tool_result", etc.
       text: z29.string().optional()
       // Make text optional since tool_result may not have it
-    }).passthrough()
+    })
     // Allow all other fields
   ),
   sender: z29.enum(["human", "assistant"]),
@@ -4825,19 +4849,19 @@ var claudeChatMessageSchema = z29.object({
   // Accept any attachment structure
   files: z29.array(z29.any())
   // Accept any file structure
-}).passthrough();
-var claudeConversationSchema = z29.object({
-  uuid: z29.string().uuid(),
+});
+var claudeConversationSchema = z29.looseObject({
+  uuid: z29.uuid(),
   name: z29.string(),
   summary: z29.string().optional(),
   // Summary field is optional
   created_at: z29.coerce.date(),
   updated_at: z29.coerce.date(),
-  account: z29.object({
-    uuid: z29.string().uuid()
+  account: z29.looseObject({
+    uuid: z29.uuid()
   }),
   chat_messages: z29.array(claudeChatMessageSchema)
-}).passthrough();
+});
 
 // ../../b4m-core/packages/services/dist/src/importHistoryService/index.js
 var ImportSource;
@@ -4889,7 +4913,7 @@ var searchProjectsSchema = z34.object({
   search: z34.string().optional(),
   filters: z34.object({
     favorite: z34.coerce.boolean().optional(),
-    scope: z34.record(z34.any()).optional()
+    scope: z34.record(z34.string(), z34.any()).optional()
   }).optional(),
   pagination: z34.object({
     page: z34.coerce.number().optional(),
@@ -4915,15 +4939,15 @@ var acceptInviteSchema = z35.object({
 import { z as z36 } from "zod";
 var cancelInviteSchema = z36.object({
   id: z36.string(),
-  type: z36.nativeEnum(InviteType),
-  email: z36.string().email().optional()
+  type: z36.enum(InviteType),
+  email: z36.email().optional()
 });
 
 // ../../b4m-core/packages/services/dist/src/sharingService/cancelOwnDocument.js
 import { z as z37 } from "zod";
 var cancelOwnDocumentInvitesSchema = z37.object({
   documentId: z37.string(),
-  type: z37.nativeEnum(InviteType)
+  type: z37.enum(InviteType)
 });
 
 // ../../b4m-core/packages/services/dist/src/sharingService/create.js
@@ -4932,12 +4956,12 @@ var defaultExpiration = () => new Date((/* @__PURE__ */ new Date()).getFullYear(
 var DEFAULT_AVAILABLE = 1;
 var createInviteSchema = z38.object({
   id: z38.string(),
-  type: z38.nativeEnum(InviteType),
-  permissions: z38.array(z38.nativeEnum(Permission)),
+  type: z38.enum(InviteType),
+  permissions: z38.array(z38.enum(Permission)),
   recipients: z38.string().array().optional(),
   description: z38.string().optional(),
-  expiresAt: z38.date().optional().default(defaultExpiration()),
-  available: z38.number().optional().default(DEFAULT_AVAILABLE)
+  expiresAt: z38.date().optional().prefault(defaultExpiration()),
+  available: z38.number().optional().prefault(DEFAULT_AVAILABLE)
 });
 
 // ../../b4m-core/packages/services/dist/src/sharingService/get.js
@@ -4951,14 +4975,14 @@ var getInviteSchema = z39.object({
 import { z as z40 } from "zod";
 var listInviteByDocumentIdAndTypeSchema = z40.object({
   documentId: z40.string(),
-  type: z40.nativeEnum(InviteType)
+  type: z40.enum(InviteType)
 });
 
 // ../../b4m-core/packages/services/dist/src/sharingService/listOwnPending.js
 import { z as z41 } from "zod";
 var listOwnPendingInvitesSchema = z41.object({
-  limit: z41.number().min(1).max(100).default(20),
-  page: z41.number().min(1).default(1)
+  limit: z41.number().min(1).max(100).prefault(20),
+  page: z41.number().min(1).prefault(1)
 });
 
 // ../../b4m-core/packages/services/dist/src/sharingService/refuse.js
@@ -4981,13 +5005,13 @@ import { z as z44 } from "zod";
 import uniq from "lodash/uniq.js";
 var addFilesProjectSchema = z44.object({
   projectId: z44.string().nonempty(),
-  fileIds: z44.array(z44.string().nonempty())
+  fileIds: z44.tuple([z44.string()], z44.string())
 });
 
 // ../../b4m-core/packages/services/dist/src/projectService/addSessions.js
 var addSessionsProjectSchema = z45.object({
   projectId: z45.string().nonempty(),
-  sessionIds: z45.array(z45.string().nonempty())
+  sessionIds: z45.tuple([z45.string()], z45.string())
 });
 
 // ../../b4m-core/packages/services/dist/src/projectService/get.js
@@ -5040,9 +5064,9 @@ var listProjectFilesSchema = z52.object({
 import { z as z53 } from "zod";
 var listProjectInvitesParamsSchema = z53.object({
   id: z53.string(),
-  statuses: z53.string().optional().default(""),
-  limit: z53.coerce.number().optional().default(10),
-  page: z53.coerce.number().optional().default(1)
+  statuses: z53.string().optional().prefault(""),
+  limit: z53.coerce.number().optional().prefault(10),
+  page: z53.coerce.number().optional().prefault(1)
 });
 
 // ../../b4m-core/packages/services/dist/src/projectService/addSystemPrompts.js
@@ -5073,14 +5097,14 @@ import { z as z59 } from "zod";
 import { z as z57 } from "zod";
 var createFavoriteParametersSchema = z57.object({
   documentId: z57.string(),
-  documentType: z57.nativeEnum(FavoriteDocumentType)
+  documentType: z57.enum(FavoriteDocumentType)
 });
 
 // ../../b4m-core/packages/services/dist/src/favoriteService/delete.js
 import { z as z58 } from "zod";
 var deleteFavoriteParametersSchema = z58.object({
   documentId: z58.string(),
-  documentType: z58.nativeEnum(FavoriteDocumentType)
+  documentType: z58.enum(FavoriteDocumentType)
 });
 
 // ../../b4m-core/packages/services/dist/src/projectService/addFavorite.js
@@ -5187,18 +5211,18 @@ var searchSchema2 = z72.object({
   filters: z72.object({
     personal: z72.union([z72.enum(["true", "false"]).transform((val) => val === "true"), z72.boolean()]).optional(),
     userId: z72.string().optional()
-  }).default({}),
+  }).prefault({}),
   pagination: z72.object({
-    page: z72.coerce.number().int().positive().default(1),
-    limit: z72.coerce.number().int().positive().max(100).default(10)
-  }).default({
+    page: z72.coerce.number().int().positive().prefault(1),
+    limit: z72.coerce.number().int().positive().max(100).prefault(10)
+  }).prefault({
     page: 1,
     limit: 10
   }),
   orderBy: z72.object({
-    field: z72.enum(["name", "createdAt", "updatedAt"]).default("name"),
-    direction: z72.enum(["asc", "desc"]).default("asc")
-  }).default({
+    field: z72.enum(["name", "createdAt", "updatedAt"]).prefault("name"),
+    direction: z72.enum(["asc", "desc"]).prefault("asc")
+  }).prefault({
     field: "name",
     direction: "asc"
   })
@@ -5233,8 +5257,8 @@ var getUsersSchema = z75.object({
 import { z as z76 } from "zod";
 var createSchema = z76.object({
   name: z76.string(),
-  personal: z76.boolean().default(false),
-  seats: z76.number().default(1),
+  personal: z76.boolean().prefault(false),
+  seats: z76.number().prefault(1),
   stripeCustomerId: z76.string().nullable(),
   billingOwnerId: z76.string().optional(),
   // Optional billing owner (defaults to user if not provided)
@@ -5286,10 +5310,10 @@ var organizationLeaveSchema = z81.object({
 import { z as z82 } from "zod";
 var createApiKeySchema = z82.object({
   apiKey: z82.string().min(6),
-  description: z82.string().optional().default(""),
-  isActive: z82.boolean().optional().default(true),
-  type: z82.nativeEnum(ApiKeyType),
-  expireDays: z82.number().min(1).max(365).default(90)
+  description: z82.string().optional().prefault(""),
+  isActive: z82.boolean().optional().prefault(true),
+  type: z82.enum(ApiKeyType),
+  expireDays: z82.number().min(1).max(365).prefault(90)
   // Default 90-day expiration
 });
 
@@ -5297,7 +5321,7 @@ var createApiKeySchema = z82.object({
 import { z as z83 } from "zod";
 var setApiKeySchema = z83.object({
   id: z83.string(),
-  type: z83.nativeEnum(ApiKeyType)
+  type: z83.enum(ApiKeyType)
 });
 
 // ../../b4m-core/packages/services/dist/src/apiKeyService/delete.js
@@ -5327,7 +5351,7 @@ var updateFabFileSchema = z87.object({
   fileName: z87.string().optional(),
   mimeType: z87.string().optional(),
   fileContent: z87.string().optional(),
-  type: z87.nativeEnum(KnowledgeType).optional(),
+  type: z87.enum(KnowledgeType).optional(),
   system: z87.boolean().optional(),
   systemPriority: z87.number().min(0).max(999).optional(),
   sessionId: z87.string().optional(),
@@ -5435,8 +5459,8 @@ var editFabFileSchema = z98.object({
     start: z98.number(),
     end: z98.number()
   }).optional(),
-  preserveFormatting: z98.boolean().optional().default(true),
-  applyImmediately: z98.boolean().optional().default(false)
+  preserveFormatting: z98.boolean().optional().prefault(true),
+  applyImmediately: z98.boolean().optional().prefault(false)
 });
 
 // ../../b4m-core/packages/services/dist/src/fabFileService/applyEdit.js
@@ -5446,7 +5470,7 @@ import { z as z99 } from "zod";
 var applyEditSchema = z99.object({
   id: z99.string(),
   modifiedContent: z99.string(),
-  createBackup: z99.boolean().optional().default(true)
+  createBackup: z99.boolean().optional().prefault(true)
 });
 
 // ../../b4m-core/packages/services/dist/src/friendshipService/respondToFriendRequest.js
@@ -5957,8 +5981,8 @@ var researchTaskCreateSchema = z114.object({
   title: z114.string().max(100),
   description: z114.string().max(500),
   prompt: z114.string().max(500).optional(),
-  type: z114.nativeEnum(ResearchTaskType),
-  executionType: z114.nativeEnum(ResearchTaskExecutionType).default(ResearchTaskExecutionType.ON_DEMAND),
+  type: z114.enum(ResearchTaskType),
+  executionType: z114.enum(ResearchTaskExecutionType).prefault(ResearchTaskExecutionType.ON_DEMAND),
   fileTagId: z114.string().optional(),
   autoGeneratedTag: z114.object({
     name: z114.string(),
@@ -5967,13 +5991,13 @@ var researchTaskCreateSchema = z114.object({
   }).optional()
 });
 var researchTaskScrapeCreateSchema = researchTaskCreateSchema.extend({
-  urls: z114.array(z114.string().url()).min(1),
+  urls: z114.array(z114.url()).min(1),
   canDiscoverLinks: z114.boolean()
 });
 var researchTaskPeriodicCreateSchema = researchTaskCreateSchema.extend({
   executionPeriodicStartAt: z114.coerce.date(),
   executionPeriodicEndAt: z114.coerce.date(),
-  executionPeriodicFrequency: z114.nativeEnum(ResearchTaskPeriodicFrequencyType)
+  executionPeriodicFrequency: z114.enum(ResearchTaskPeriodicFrequencyType)
 });
 var researchTaskScheduledCreateSchema = researchTaskCreateSchema.extend({
   executionScheduledAt: z114.coerce.date()
@@ -6014,10 +6038,10 @@ var updateResearchTaskSchema = z117.object({
   id: z117.string(),
   title: z117.string(),
   description: z117.string(),
-  type: z117.nativeEnum(ResearchTaskType)
+  type: z117.enum(ResearchTaskType)
 });
 var researchTaskScrapeUpdateSchema = updateResearchTaskSchema.extend({
-  urls: z117.array(z117.string().url()).min(1),
+  urls: z117.array(z117.url()).min(1),
   canDiscoverLinks: z117.boolean()
 });
 
@@ -6103,7 +6127,7 @@ var tagCreateSchema = z126.object({
   icon: z126.string().optional(),
   description: z126.string().optional(),
   color: z126.string().optional(),
-  type: z126.nativeEnum(TagType)
+  type: z126.enum(TagType)
 });
 
 // ../../b4m-core/packages/services/dist/src/tagService/update.js
@@ -6145,28 +6169,28 @@ var createArtifactSchema = z129.object({
   content: z129.string().min(1),
   projectId: z129.string().optional(),
   organizationId: z129.string().optional(),
-  visibility: z129.enum(["private", "project", "organization", "public"]).default("private"),
-  tags: z129.array(z129.string().max(50)).max(20).default([]),
+  visibility: z129.enum(["private", "project", "organization", "public"]).prefault("private"),
+  tags: z129.array(z129.string().max(50)).max(20).prefault([]),
   versionTag: z129.string().max(100).optional(),
   sourceQuestId: z129.string().optional(),
   sessionId: z129.string().optional(),
   parentArtifactId: z129.string().optional(),
   permissions: z129.object({
-    canRead: z129.array(z129.string()).default([]),
-    canWrite: z129.array(z129.string()).default([]),
-    canDelete: z129.array(z129.string()).default([]),
-    isPublic: z129.boolean().default(false),
-    inheritFromProject: z129.boolean().default(true)
+    canRead: z129.array(z129.string()).prefault([]),
+    canWrite: z129.array(z129.string()).prefault([]),
+    canDelete: z129.array(z129.string()).prefault([]),
+    isPublic: z129.boolean().prefault(false),
+    inheritFromProject: z129.boolean().prefault(true)
   }).optional(),
-  metadata: z129.record(z129.unknown()).default({})
+  metadata: z129.record(z129.string(), z129.unknown()).prefault({})
 });
 
 // ../../b4m-core/packages/services/dist/src/artifactService/get.js
 import { z as z130 } from "zod";
 var getArtifactSchema = z130.object({
   id: z130.string(),
-  includeContent: z130.boolean().default(false),
-  includeVersions: z130.boolean().default(false),
+  includeContent: z130.boolean().prefault(false),
+  includeVersions: z130.boolean().prefault(false),
   version: z130.number().optional()
 });
 
@@ -6180,11 +6204,11 @@ var listArtifactsSchema = z131.object({
   sessionId: z131.string().optional(),
   tags: z131.array(z131.string()).optional(),
   search: z131.string().optional(),
-  limit: z131.number().min(1).max(100).default(20),
-  offset: z131.number().min(0).default(0),
-  sortBy: z131.enum(["createdAt", "updatedAt", "title", "type"]).default("updatedAt"),
-  sortOrder: z131.enum(["asc", "desc"]).default("desc"),
-  includeDeleted: z131.boolean().default(false)
+  limit: z131.number().min(1).max(100).prefault(20),
+  offset: z131.number().min(0).prefault(0),
+  sortBy: z131.enum(["createdAt", "updatedAt", "title", "type"]).prefault("updatedAt"),
+  sortOrder: z131.enum(["asc", "desc"]).prefault("desc"),
+  includeDeleted: z131.boolean().prefault(false)
 });
 
 // ../../b4m-core/packages/services/dist/src/artifactService/update.js
@@ -6205,7 +6229,7 @@ var updateArtifactSchema = z132.object({
     isPublic: z132.boolean().optional(),
     inheritFromProject: z132.boolean().optional()
   }).optional(),
-  metadata: z132.record(z132.unknown()).optional(),
+  metadata: z132.record(z132.string(), z132.unknown()).optional(),
   changes: z132.array(z132.string()).optional(),
   changeDescription: z132.string().max(1e3).optional(),
   createNewVersion: z132.boolean().optional(),
@@ -6216,7 +6240,7 @@ var updateArtifactSchema = z132.object({
 import { z as z133 } from "zod";
 var deleteArtifactSchema = z133.object({
   id: z133.string(),
-  hardDelete: z133.boolean().default(false)
+  hardDelete: z133.boolean().prefault(false)
   // For future implementation
 });
 
@@ -6226,14 +6250,14 @@ var questSchema = z134.object({
   id: z134.string(),
   title: z134.string().min(1).max(255),
   description: z134.string().max(MAX_DESCRIPTION_LENGTH),
-  status: z134.enum(["not_started", "in_progress", "completed", "blocked"]).default("not_started"),
+  status: z134.enum(["not_started", "in_progress", "completed", "blocked"]).prefault("not_started"),
   order: z134.number().min(0),
-  dependencies: z134.array(z134.string()).default([]),
+  dependencies: z134.array(z134.string()).prefault([]),
   estimatedTime: z134.string().optional()
 });
 var questResourceSchema = z134.object({
   title: z134.string().min(1).max(255),
-  url: z134.string().url(),
+  url: z134.url(),
   type: z134.enum(["documentation", "tutorial", "reference", "example"])
 });
 var createQuestMasterSchema = z134.object({
@@ -6242,23 +6266,23 @@ var createQuestMasterSchema = z134.object({
   goal: z134.string().min(1).max(MAX_GOAL_LENGTH),
   complexity: z134.enum(["beginner", "intermediate", "advanced", "expert"]),
   estimatedTotalTime: z134.string().optional(),
-  prerequisites: z134.array(z134.string().max(200)).default([]),
+  prerequisites: z134.array(z134.string().max(200)).prefault([]),
   quests: z134.array(questSchema).min(1),
-  resources: z134.array(questResourceSchema).default([]),
+  resources: z134.array(questResourceSchema).prefault([]),
   projectId: z134.string().optional(),
   organizationId: z134.string().optional(),
-  visibility: z134.enum(["private", "project", "organization", "public"]).default("private"),
-  tags: z134.array(z134.string().max(MAX_TAG_LENGTH)).max(20).default([]),
+  visibility: z134.enum(["private", "project", "organization", "public"]).prefault("private"),
+  tags: z134.array(z134.string().max(MAX_TAG_LENGTH)).max(20).prefault([]),
   permissions: z134.object({
-    canRead: z134.array(z134.string()).default([]),
-    canWrite: z134.array(z134.string()).default([]),
-    canDelete: z134.array(z134.string()).default([]),
-    isPublic: z134.boolean().default(false),
-    inheritFromProject: z134.boolean().default(true)
+    canRead: z134.array(z134.string()).prefault([]),
+    canWrite: z134.array(z134.string()).prefault([]),
+    canDelete: z134.array(z134.string()).prefault([]),
+    isPublic: z134.boolean().prefault(false),
+    inheritFromProject: z134.boolean().prefault(true)
   }).optional(),
   sourceQuestId: z134.string().optional(),
   sessionId: z134.string().optional(),
-  metadata: z134.record(z134.unknown()).default({})
+  metadata: z134.record(z134.string(), z134.unknown()).prefault({})
 });
 
 // ../../b4m-core/packages/services/dist/src/questMasterService/updateQuestStatus.js
@@ -6326,20 +6350,20 @@ import { z as z137 } from "zod";
 var llmAnalysisResponseSchema = z137.object({
   summary: z137.string().min(1, "Summary cannot be empty"),
   entities: z137.object({
-    companies: z137.array(z137.string()).default([]),
-    people: z137.array(z137.string()).default([]),
-    products: z137.array(z137.string()).default([]),
-    technologies: z137.array(z137.string()).default([])
+    companies: z137.array(z137.string()).prefault([]),
+    people: z137.array(z137.string()).prefault([]),
+    products: z137.array(z137.string()).prefault([]),
+    technologies: z137.array(z137.string()).prefault([])
   }),
   sentiment: z137.enum(["positive", "neutral", "negative", "urgent"]),
   actionItems: z137.array(z137.object({
     description: z137.string(),
     deadline: z137.string().optional()
     // ISO date string from LLM
-  })).default([]),
+  })).prefault([]),
   privacyRecommendation: z137.enum(["public", "team", "private"]),
-  embargoDetected: z137.boolean().default(false),
-  suggestedTags: z137.array(z137.string()).default([])
+  embargoDetected: z137.boolean().prefault(false),
+  suggestedTags: z137.array(z137.string()).prefault([])
 });
 
 // ../../b4m-core/packages/services/dist/src/llm/tools/ToolCacheManager.js
@@ -7537,8 +7561,8 @@ var editFileSchema = z138.object({
     start: z138.number().describe("Starting character position of the selection"),
     end: z138.number().describe("Ending character position of the selection")
   }).optional().describe("Optional selection range to edit within the file"),
-  preserveFormatting: z138.boolean().optional().default(true).describe("Whether to preserve the original formatting style"),
-  returnDiff: z138.boolean().optional().default(true).describe("Whether to return a diff of the changes")
+  preserveFormatting: z138.boolean().optional().prefault(true).describe("Whether to preserve the original formatting style"),
+  returnDiff: z138.boolean().optional().prefault(true).describe("Whether to return a diff of the changes")
 });
 function generateSimpleDiff(original, modified) {
   const differences = diffLines2(original, modified);
@@ -14563,10 +14587,10 @@ var ImageGenerationBodySchema = OpenAIImageGenerationInput.extend({
   userId: z141.string(),
   prompt: z141.string(),
   organizationId: z141.string().nullable().optional(),
-  safety_tolerance: z141.number().min(BFL_SAFETY_TOLERANCE.MIN).max(BFL_SAFETY_TOLERANCE.MAX).optional().default(BFL_SAFETY_TOLERANCE.DEFAULT),
-  prompt_upsampling: z141.boolean().optional().default(false),
+  safety_tolerance: z141.number().min(BFL_SAFETY_TOLERANCE.MIN).max(BFL_SAFETY_TOLERANCE.MAX).optional().prefault(BFL_SAFETY_TOLERANCE.DEFAULT),
+  prompt_upsampling: z141.boolean().optional().prefault(false),
   seed: z141.number().nullable().optional(),
-  output_format: z141.enum(["jpeg", "png"]).nullable().optional().default("png"),
+  output_format: z141.enum(["jpeg", "png"]).nullable().optional().prefault("png"),
   width: z141.number().optional(),
   height: z141.number().optional(),
   aspect_ratio: z141.string().optional(),
@@ -14583,9 +14607,9 @@ var VideoGenerationBodySchema = z142.object({
   questId: z142.string(),
   userId: z142.string(),
   prompt: z142.string(),
-  model: z142.nativeEnum(VideoModels).default(VideoModels.SORA_2),
-  seconds: z142.union([z142.literal(4), z142.literal(8), z142.literal(12)]).default(4),
-  size: z142.enum(["720x1280", "1280x720", "1024x1792", "1792x1024"]).default(VIDEO_SIZE_CONSTRAINTS.SORA.defaultSize),
+  model: z142.enum(VideoModels).prefault(VideoModels.SORA_2),
+  seconds: z142.union([z142.literal(4), z142.literal(8), z142.literal(12)]).prefault(4),
+  size: z142.enum(["720x1280", "1280x720", "1024x1792", "1792x1024"]).prefault(VIDEO_SIZE_CONSTRAINTS.SORA.defaultSize),
   organizationId: z142.string().nullable().optional()
 });
 
@@ -14601,10 +14625,10 @@ var ImageEditBodySchema = OpenAIImageGenerationInput.extend({
   userId: z143.string(),
   prompt: z143.string(),
   organizationId: z143.string().nullable().optional(),
-  safety_tolerance: z143.number().min(BFL_SAFETY_TOLERANCE.MIN).max(BFL_SAFETY_TOLERANCE.MAX).optional().default(BFL_SAFETY_TOLERANCE.DEFAULT),
-  prompt_upsampling: z143.boolean().optional().default(false),
+  safety_tolerance: z143.number().min(BFL_SAFETY_TOLERANCE.MIN).max(BFL_SAFETY_TOLERANCE.MAX).optional().prefault(BFL_SAFETY_TOLERANCE.DEFAULT),
+  prompt_upsampling: z143.boolean().optional().prefault(false),
   seed: z143.number().nullable().optional(),
-  output_format: z143.enum(["jpeg", "png"]).optional().default("png"),
+  output_format: z143.enum(["jpeg", "png"]).optional().prefault("png"),
   width: z143.number().optional(),
   height: z143.number().optional(),
   aspect_ratio: z143.string().optional(),
@@ -14982,12 +15006,12 @@ var AgentFrontmatterSchema = z147.object({
   "denied-tools": z147.array(z147.string()).optional(),
   skills: z147.array(z147.string()).optional(),
   "max-iterations": z147.object({
-    quick: z147.number().int().positive().optional(),
-    medium: z147.number().int().positive().optional(),
-    very_thorough: z147.number().int().positive().optional()
+    quick: z147.int().positive().optional(),
+    medium: z147.int().positive().optional(),
+    very_thorough: z147.int().positive().optional()
   }).optional(),
   "default-thoroughness": z147.enum(["quick", "medium", "very_thorough"]).optional(),
-  variables: z147.record(z147.string()).optional(),
+  variables: z147.record(z147.string(), z147.string()).optional(),
   hooks: AgentHooksSchema
 });
 var DEFAULT_MAX_ITERATIONS = {
@@ -17361,147 +17385,6 @@ var ApiClient = class {
 // src/index.tsx
 import { isAxiosError as isAxiosError2 } from "axios";
 
-// package.json
-var package_default = {
-  name: "@bike4mind/cli",
-  version: "0.2.31-b4m-cli-undo-command.19493+44c80c9bc",
-  type: "module",
-  description: "Interactive CLI tool for Bike4Mind with ReAct agents",
-  license: "UNLICENSED",
-  author: "Bike4Mind",
-  repository: {
-    type: "git",
-    url: "git+https://github.com/bike4mind/lumina5.git"
-  },
-  homepage: "https://github.com/bike4mind/lumina5#readme",
-  bugs: "https://github.com/bike4mind/lumina5/issues",
-  publishConfig: {
-    access: "public"
-  },
-  keywords: [
-    "cli",
-    "ai",
-    "bike4mind",
-    "agent",
-    "mcp",
-    "react-agent"
-  ],
-  bin: {
-    b4m: "./bin/bike4mind-cli.mjs",
-    bike4mind: "./bin/bike4mind-cli.mjs"
-  },
-  files: [
-    "dist",
-    "bin"
-  ],
-  scripts: {
-    dev: "tsx src/index.tsx",
-    build: "tsup",
-    typecheck: "tsc --noEmit",
-    test: "vitest run",
-    "test:watch": "vitest",
-    start: "node dist/index.js",
-    prepublishOnly: "pnpm build",
-    postinstall: `node -e "try { require('better-sqlite3') } catch(e) { if(e.message.includes('bindings')) { console.log('\\n\u26A0\uFE0F  Rebuilding better-sqlite3 native bindings...'); require('child_process').execSync('pnpm rebuild better-sqlite3', {stdio:'inherit'}) } }"`
-  },
-  dependencies: {
-    "@anthropic-ai/sdk": "^0.71.2",
-    "@aws-sdk/client-apigatewaymanagementapi": "3.654.0",
-    "@aws-sdk/client-bedrock-runtime": "3.654.0",
-    "@aws-sdk/client-cloudwatch": "3.654.0",
-    "@aws-sdk/client-lambda": "3.654.0",
-    "@aws-sdk/client-s3": "3.654.0",
-    "@aws-sdk/client-sqs": "3.654.0",
-    "@aws-sdk/client-transcribe": "3.654.0",
-    "@aws-sdk/credential-provider-node": "3.654.0",
-    "@aws-sdk/node-http-handler": "^3.374.0",
-    "@aws-sdk/s3-request-presigner": "3.654.0",
-    "@casl/ability": "^6.5.0",
-    "@google/genai": "^1.27.0",
-    "@google/generative-ai": "^0.21.0",
-    "@joplin/turndown-plugin-gfm": "^1.0.62",
-    "@mendable/firecrawl-js": "^1.29.3",
-    "@modelcontextprotocol/sdk": "1.20.1",
-    "@octokit/rest": "^22.0.0",
-    "@opensearch-project/opensearch": "2.11.0",
-    "async-mutex": "^0.5.0",
-    axios: "^1.13.2",
-    bcryptjs: "^2.4.3",
-    "better-sqlite3": "^12.5.0",
-    cheerio: "1.0.0-rc.12",
-    "cli-highlight": "^2.1.11",
-    "csv-parse": "^5.5.6",
-    dayjs: "^1.11.13",
-    diff: "^8.0.2",
-    dotenv: "^16.3.1",
-    "eventsource-parser": "^3.0.6",
-    "file-type": "^18.7.0",
-    "fuse.js": "^7.1.0",
-    glob: "^13.0.0",
-    "gray-matter": "^4.0.3",
-    ink: "^6.5.1",
-    "ink-select-input": "^6.2.0",
-    "ink-spinner": "^5.0.0",
-    "ink-text-input": "^6.0.0",
-    jsonwebtoken: "^9.0.2",
-    lodash: "^4.17.21",
-    mammoth: "^1.11.0",
-    marked: "^15.0.11",
-    mathjs: "^14.2.0",
-    "mime-types": "^2.1.35",
-    mongoose: "^8.8.3",
-    ollama: "^0.5.12",
-    open: "^11.0.0",
-    openai: "^6.18.0",
-    "p-limit": "^6.2.0",
-    picomatch: "^4.0.3",
-    qrcode: "^1.5.4",
-    react: "^19.2.3",
-    sharp: "^0.34.5",
-    speakeasy: "^2.0.0",
-    tiktoken: "^1.0.16",
-    "tree-sitter-wasms": "^0.1.13",
-    turndown: "^7.2.0",
-    unpdf: "^0.10.0",
-    uuid: "^9.0.1",
-    voyageai: "^0.0.4",
-    "web-tree-sitter": "0.25.10",
-    xlsx: "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",
-    yargs: "^17.7.2",
-    yauzl: "^3.1.3",
-    zod: "^3.25.76",
-    "zod-validation-error": "^1.5.0",
-    zustand: "^4.5.4"
-  },
-  devDependencies: {
-    "@bike4mind/agents": "0.1.0",
-    "@bike4mind/common": "2.52.1-b4m-cli-undo-command.19493+44c80c9bc",
-    "@bike4mind/mcp": "1.31.1-b4m-cli-undo-command.19493+44c80c9bc",
-    "@bike4mind/services": "2.50.1-b4m-cli-undo-command.19493+44c80c9bc",
-    "@bike4mind/utils": "2.7.1-b4m-cli-undo-command.19493+44c80c9bc",
-    "@types/better-sqlite3": "^7.6.13",
-    "@types/diff": "^5.0.9",
-    "@types/jsonwebtoken": "^9.0.4",
-    "@types/node": "^22.9.0",
-    "@types/picomatch": "^4.0.2",
-    "@types/react": "^19.2.7",
-    "@types/uuid": "^9.0.7",
-    "@types/yargs": "^17.0.32",
-    fdir: "^6.5.0",
-    fzf: "^0.5.2",
-    ignore: "^7.0.5",
-    "ink-testing-library": "^4.0.0",
-    tsup: "^8.5.1",
-    tsx: "^4.21.0",
-    typescript: "^5.9.3",
-    vitest: "^3.2.4"
-  },
-  optionalDependencies: {
-    "@vscode/ripgrep": "^1.17.0"
-  },
-  gitHead: "44c80c9bcf8bf132a8b75c3635426a901adce99e"
-};
-
 // src/agents/toolFilter.ts
 function matchesToolPattern3(toolName, pattern) {
   const regexPattern = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
@@ -21453,6 +21336,19 @@ No usage data available for the last ${USAGE_DAYS} days.`);
     }
   );
 }
+try {
+  const updateResult = await Promise.race([
+    checkForUpdate(package_default.version),
+    new Promise((resolve3) => setTimeout(() => resolve3(null), 3e3))
+  ]);
+  if (updateResult?.updateAvailable) {
+    console.log(
+      `\x1B[33m  \u2B06 Update available: v${updateResult.currentVersion} \u2192 v${updateResult.latestVersion} (run: b4m update)\x1B[0m
+`
+    );
+  }
+} catch {
+}
 var isDevMode = import.meta.url.includes("/src/") || process.env.NODE_ENV === "development";
 if (isDevMode) {
   logger.debug("\u{1F527} Running in development mode (using TypeScript source)\n");